Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qIeRE8wyXrlF1mLW1mrccphgGck.roa
File: qIeRE8wyXrlF1mLW1mrccphgGck.roa (raw, json)
Hash identifier: REhqHnKANnWmqtZsMFjs5lODU222ALEcX9DrQImgIlM=
Subject key identifier: A8:87:91:13:CC:32:5E:B9:45:D6:62:D6:D6:6A:DC:72:98:60:19:C9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05382BF8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qIeRE8wyXrlF1mLW1mrccphgGck.roa
Signing time: Mon 21 Mar 2022 04:03:15 +0000
ROA not before: Mon 21 Mar 2022 04:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87567352 (0x5382bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 21 04:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8879113cc325eb945d662d6d66adc72986019c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:5a:68:de:4f:53:12:21:a8:99:39:df:84:
c2:d8:48:75:9d:c5:b9:7c:bb:85:9b:61:85:a7:6f:
28:6d:e7:cf:f5:00:43:75:d7:38:ed:8d:d5:3a:73:
83:bb:9b:77:dd:58:bc:83:aa:02:53:d9:a3:05:ea:
f6:1c:5f:ea:d3:c3:ad:37:45:d3:1a:3c:37:f7:02:
ff:ec:ca:f4:0f:f3:a0:6d:25:76:99:ce:25:bf:91:
46:63:64:08:83:f2:9c:34:7a:78:00:e5:5e:23:01:
58:8f:51:d7:01:4a:26:6d:bf:24:eb:93:5b:4e:31:
56:e7:e5:4e:ba:d5:3f:04:c1:2c:9d:9c:a8:17:c3:
bf:50:62:38:dd:75:04:ac:1b:70:e2:85:bc:f3:d4:
ee:30:44:74:ea:5d:48:ac:e3:78:57:0a:b6:8c:dc:
bf:e9:a4:b2:cd:6d:98:9e:09:ed:29:b1:8b:5a:3a:
1c:c1:ae:21:5c:79:49:fb:d5:3b:2e:ed:13:34:1b:
66:e0:25:1f:0c:cd:a8:ae:4f:5c:d2:fc:e2:92:8d:
3a:d1:08:44:60:13:ed:e2:7c:d7:0b:0e:d6:f4:53:
f4:44:24:23:7e:50:34:d7:89:11:c5:e5:4a:a9:80:
08:87:f0:d4:c0:20:b1:71:25:1c:4b:24:e6:38:69:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:91:13:CC:32:5E:B9:45:D6:62:D6:D6:6A:DC:72:98:60:19:C9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qIeRE8wyXrlF1mLW1mrccphgGck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
63:02:e0:3f:b8:14:73:62:e1:a5:4a:c5:d4:14:3e:30:9a:96:
5d:f6:75:8e:11:08:51:d0:84:5f:a1:55:7d:b7:6d:35:66:76:
01:88:32:53:3a:ae:f8:3e:b0:b3:58:72:19:ef:16:52:a8:d4:
c3:43:7b:97:a9:9b:7c:31:0e:e6:47:1c:97:5d:af:76:5f:ca:
b1:c3:93:01:30:3d:a7:ec:e9:f7:34:4e:65:41:1a:46:c3:e4:
c8:af:47:13:af:cf:ff:5e:12:9c:ac:1e:1b:0c:50:f8:87:2b:
90:69:73:d5:c0:fd:29:28:3b:c9:80:bc:f6:d7:db:74:cc:f7:
18:1b:e8:13:14:26:76:b2:9e:63:2e:06:6d:b0:1c:2d:1b:c5:
ad:b2:f9:30:9b:90:ae:67:56:9b:e0:aa:13:47:ef:4d:b8:07:
36:51:64:18:46:b0:57:38:1e:21:7c:ba:ab:12:66:0b:1e:0c:
51:b8:66:52:a1:0c:9f:a3:f8:32:08:61:c1:1c:94:64:2e:6c:
e7:7b:1e:59:b1:4d:30:d5:87:a8:0f:c3:dc:f1:96:c6:ed:bb:
2f:86:f0:99:2c:71:d4:f9:4e:1c:56:2b:82:7e:df:7e:a1:bd:
85:97:9d:e0:b2:5e:7e:0c:2d:9c:d2:c8:fa:89:ae:57:a2:55:
63:13:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org